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(54) Location dependant service access 

(57) Access to a distributed computer system 1 7, 
1 71 , 1 72 is achieved from a mobile terminal 1 1 . The lo- 
cation or other characteristics of the terminal 11 are 
identified and communicated to a co-operating access 
control server 13. A store 15 holds details of location- 
based servers 16, 161 , 162, which in turn have details 
of local computer equipment 17, 1 71 , 1 72. The access 
control server 13 identifies a suitable location-based 



server 16 and provides access to the location based 
server so that the terminal 11 can identify the individual 
items of computer equipment 17, 171, 172 available. 
The invention allows a mobile terminal 11 to make use 
of location-based facilities 17 by forming a connection 
with the local distributed computer system 1 6, 1 7, 1 71 , 
172. Examples include access from the mobile unit to 
fixed equipment such as printers, or location based 
services such as airport check-in services. 
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Description 

[0001] This invention relates to the control of access 
to elements of a distributed computer system. 
[0002] Distributed computing systems provide a 
group of computer apparatus, (for example 17, 171, 172 
in Figure 1) such as laptop terminals, printers, databas- 
es, etc, which can interact with each other as required, 
rather than being permanently connected, either directly 
or through a common "server". They typically interact 
through a look-up server (1 6) which stores the identities 
(network addresses) of the elements forming the sys- 
tem. When it is connected to the network, the apparatus 
sends out a multicast call to "discover" the nearest 
lookup server - that is, any serving local area networks 
(LANs) to which the apparatus is connected, and causes 
itself to be registered with any lookup server that re- 
sponds. 

[0003] Advantages of such systems include the ability 
to interoperate apparatus with the minimum of access 
control protocols for the user to perform, and their resil- 
ience to component failure, because even if parts of the 
network, or individual terminals or services fail, other 
parts continue to operate. Initial disadvantages of dis- 
tributed computing architectures were network re- 
sponse times, particularly if interoperation outside a lo- 
cal network was required, and complexity of develop- 
ment, though this has been addressed by more recent 
standard interfaces such as the one developed by Sun 
Microsystems known as "J I NT, which uses the JAVA 
programming language. 

[0004] For such systems to operate it is necessary to 
define in advance the apparatus which are to co-oper- 
ate. In particular, a terminal (1 0) forming part of the sys- 
tem must be provided with the means to access the look 
up server, and must therefore be recognisable to it. 
However, there are circumstances when it would be 
convenient for a given apparatus to be made a tempo- 
rary member of such a group. In particular, a user of a 
mobile terminal (such as a Personal Digital Assistant: a 
portable computer terminal with communications capa- 
bility) may require use of computer entities specific to 
his current location. 

[0005] According to the present invention there is pro- 
vided a method of providing access to a distributed com- 
puter system from a terminal, comprising the steps of 
identifying one or more characteristics of the terminal, 
selecting a distributed computer system having the ter- 
minal characteristics so identified, and providing access 
to the server of the distributed computer system so iden- 
tified. This process is preferably performed by the ac- 
cess control server with which the terminal communi- 
cates, the access control server being part of the dis- 
tributed system and therefore capable of connection to 
the selected apparatus. In a preferred embodiment, the 
characteristic is the location of the terminal. The location 
may be identified by an automatic position-finding proc- 
ess. Alternatively location may be identified by user en- 



try of details by a keypad. Access may be provided by 
retrieval from a store of an address for a distributed com- 
puter system, or a selected element thereof, having the 
required characteristic. 
5 [0006] An embodiment of the invention will now be de- 
scribed, with reference to the drawings, in which 

Figure 1 illustrates the general arrangement of the 
components participating in the service. 
10 Figure 2 illustrates the service identification phase 
Figure 3 Illustrates the operation of the service se- 
lection and interaction phase 

[0007] The embodiment to be described in detail is a 
*5 printer service which allows a user access to identify a 
printing apparatus available in his vicinity, and then 
make use of it through his PDA. However, as will be de- 
scribed, many other services may be provided in the 
same way. 

20 [0008] The embodiment illustrated in Figure 1 allows 
a user with a standard Personal Digital Assistant 
("PDA") 11 - essentially a laptop computer with access 
to a cellular communications network 18 - to access the 
functionality of a local service 17 identified as appropri- 

25 ate to a location specified by the user himself, or deter- 
mined automatically by his PDA 11 . The interface may 
be in any suitable protocol, the one illustrated being con- 
figured for HTTP Protocol. 

[0009] The user's mobile unit 11 has a means 12 for 
30 determining its geographical location. This may take 
one of many forms, as will be described later. The mobile 
unit 11 is in communication through the communications 
network 18 with an access control server 13, through 
which it may access a network of computers, typically 
35 various LANs within a company such as the "Intranet" 
14 (and also the internet). The access control server 13 
also has access to a database 15 which stores access 
address data for a number of location-based look-up 
servers 16, 161 , 162 etc, in conjunction wiith geograph- 
ic ical location data for each one. Each such location- 
based server (1 6 for example) stores details such as the 
identities, interface requirements and current status (in 
service, busy, not available etc) of services 1 7, 1 71 , 1 72 
available at its respective location, and the address by 
45 which each such device or service may be accessed 
through the distributed computer system 14. in the "Jl- 
Nl" system previously referred to, a service (17, 
171,172), when connected to the network, sends out 
multicast calls to w discover" the nearest lookup server 
so 1 6. It then registers itself on the server 1 6 as being avail- 
able. 

[0010] The access control server 13 is able to connect 
to the lookup server 1 6 of a local LAN to find out the 
printer services 1 7, 1 71 , 1 72 that have been registered 
55 with that lookup server 1 6. The access control server 1 3 
does not have to be part of that LAN itself, but does form 
part of the distributed system and runs servlets which 
communicate with the other members 16, 17, 171, 172 
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of the distributed system. The access control server 13 
does not necessarily need to be recognised by the other 
parts of the system. It acts as a client in an agent based 
system: the access control server 1 3 needs to be aware 
of and control the services 17, 171, 172, and the lookup s 
server 16, and in some applications (in particular the 
look up server 1 6) to retrieve data from them. However, 
the access control server 1 3 does not itself need to be 
accessed from the services 17, 171, 1 72 or the lookup 
server 1 6 except in response to a specific request from 
the access control server 13. In contrast to the prior art 
arrangement, in which each PDA 1 0 must be a pre-ex- 
isting member of the distributed system, with a suitable 
access means to the look-up server, in the present in- 
vention only the access control server 13 needs to have 
this capability. 

[0011] The process of accessing a local service 17 
from a mobile device 11 involves the user performing 
three principal steps: Identification of Location, Selec- 
tion of Local Services, and Interaction with Local Serv- 
ices 

[0012] Identification of the location of the user 11 may 
be automatic. The satellite-based Global Positioning 
System could be used, but is unreliable inside buildings, 
and requires the user terminal to have a GPS receiver. 
[0013] A position-finding system based on the cellular 
telephone network such as that disclosed in the present 
applicant company's International Patent Specification 
WO96/35306, may be used. This measures the position 
of the mobile unit relative to the network of local radio 
base stations, by measuring the difference in arrival 
times of signals transmitted synchronously by the base 
stations. In this arrangement the position-finding proc- 
ess may be carried out by the network, and in particular 
by the access control server 13 
[0014] The "ad hoc" piconet system being developed 
by a consortium led by Ericsson and known as "Blue- 
tooth" is another possibility. This system allows devices 
equipped with a suitable "Bluetooth" transceiver to es- 
tablish localised networks of co-operating devices. A 
mobile user terminal equipped with such a transceiver 
would automatically become part of any localised net- 
work within whose range it moves. One of the devices 
at a given location may act as a beacon to identify its 
location, and consequently the approximate location of 
other devices in communication with it: this may be an 
ancillary function of a device provided for another pri- 
mary purpose, or it may be provided by a dedicated de- 
vice. The latter arrangement is preferred since it avoids 
the possibility of the host device being removed for re- 
pair or replacement. 

[0015] Alternatively, the user may select the location 
from a form-based Web page, using his own knowledge 
as to his wherabouts, and enter his position manually. 
[0016] Once the user's current location has been 
identified, by any of the means described above, the 
services required are identified. This again may be done 
by manual input by the user, or may be done automati- 



cally as a result of previous user activity. In manual 
mode the user may select a function, for example "Find 
Printers". In each case the access control server will re- 
trieve from the local server a list of local printers nearest 
the user's location. The user may now select a printer 
to use. Although in the example data is transferred only 
in one direction; from user to printer, the invention may 
be used to transfer data in either direction for example 
instead of printing a file from a PDA using a local printer, 
the invention can be used to copy or display locally 
stored files on the user terminal. 
[0017] In detail, the service identification and interac- 
tion processes operate as follows. 
[001 8] The first part of the process concerns the initial 
query - i.e given a location, (specified by one of the 
means described above) the services available are to 
be identified. 

[0019] This query is passed to the access control 
server 1 3 using standard HTTP CGI (Common Gateway 
Interface) technology. In this embodiement the access 
control server 13 runs Java Server Pages technology in 
the form of a "servlet" 1 9 (a standard Sun Microsystems 
web server-side technology) to process the queries and 
Interface with JIN I. The steps involved in this process 
are shown in Figure 2. Firstly the user transmits a "Re- 
quest for Local Services" (step 21 ) to its access control 
server 1 3. The servlet 1 9 in the access control server 
13 sends a query to the. database 15 for the nearest 
lookup server at the specified location (step 22). The da- 
tabase 15 returns a list of lookup servers 16, 161, 162 
at the requested location (step 23). The servlet 19 then 
contacts the lookup server 16 Identified as being the 
most appropriate, to obtain a list of local services 17, 
171 , 172 (step 24). This list may be stored in the data- 
base 15 to implement a form of caching (step 25) or it 
may be incorporated in the HTML message as a "cook- 
ie", that is a small programme for operation of the user 
terminal. The list is transmitted to the user terminal 11 
as a HTML (hypertext markup language) message (step 
26). 

[0020] The next part of the process concerns identifi- 
cation of the "interface" between the user terminal 11 
and the service 1 7 to be used, which requires definition 
to allow interoperability. The interface definition files 
may be stored in a repository associated with each serv- 
er 16, 161, 162, which the user terminal 11 can access 
to retrieve the interface data it requires. They may in- 
stead be retrieved from the look up server and stored in 
the database 15 with the list itself. In a simpler system, 
services compatible with the system may be arranged 
to all have a standard interface, or set of functions, mak- 
ing these steps unnecessary. For example all printer 
services would implement the following interfaces, us- 
ing the same definitions and operating protocols: 

landscape/portrait selection 
black and white/colour selection 
number of copies. 
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[0021] The next part of the process, shown in Figure 
3, is the local service interaction phase. The user termi- 
nal 11 transmits an instruction to the access control 
server 1 3 to call the required service 1 7 from within the 
servlet 19. The necessary interface parameters are also 
transmitted, either automatically or by the user in re- 
sponse to a prompt. Firstly a request is made to the serv- 
let 1 9 for a specific Local Service 1 7, selected from the 
list (step 31), including any parameters required. These 
are checked by the servlet 1 9 (step 32), and if necessary 
prompts are transmitted to the user for re-entry of the 
data, or entry of further user selections. The address de- 
tails of the requested service 1 7 are next extracted from 
the database 1 5 (step 33), or run as cookies in the server 
if they have previously been stored there in this form. 
The requested service unit 1 7 (the printer in the present 
example) is then called with the required parameters 
(step 34), and a job status is returned to the user termi- 
nal 11 (e.g. "print job submitted") (step 35). 
[0022] This arrangement has several useful features. 
Firstfy, the system is independent of the specific devices 
available, since the interface is handled through the net- 
work. Secure managed access is possible. Different in- 
terfaces can be used, using the service control unit 13 
to provide a standard "look and feel" to the user. 
[0023] The invention has several applications beyond 
the simple printer service application outlined above. 
Further examples will now be described, with reference 
to the same figures. 

[0024] A localised select/payment system may be 
provided, in which a user in a restaurant either logs onto 
a restaurant website 17 using his own PDA 11, oris giv- 
en a restaurant PDA already connected to the system. 
The PDA 11 is used to access local information, such 
as the menu (which may include multimedia menu pres- 
entation, including ingredients etc), and then call for a 
waiter, or alternatively order the meal using an on-line 
order system. Further dishes/courses etc can be or- 
dered when ready. Finally the user can opt to pay the 
bill automatically via a payment system server 171 
(which has a standard interface) connected to the res- 
taurant's EFTPOS (electronic funds transfer at point of 
sale) system. This allows the user to view a multimedia 
menu on a non-obtrusive device. The restaurant chain 
can implement the same secure system at each branch, 
but customise local branch menus, prices and so on. 
Other services, such as a printer service 1 7 to print the 
bill or make a copy of the menu, or a taxi ordering service 
172, can be readily added. Other select/payment sys- 
tems can be envisioned for other scenarios, such as 
train ticket ordering. 

[0025] Another potential application is for localised 
secure service access. A subscriber to an airporfs sys- 
tem, on entering the airport, may connect his handsetl 1 
over the network 1 8 to the airport's system 1 6, and se- 
lect a check-in service 1 71 . This displays a list of airlines 
that have subscribed to the scheme, and the local flights 
departures. The user selects the airline and flight, enters 



a pre-defined (secure) code, and is automatically 
checked in. The user may be able to select a specific 
seat, and specify in-flight meals, and obtain details for 
luggage check-in. Other services which might be added 

5 include last-minute ticket finding, and accommodation 
and transport services for arriving passengers, as well 
as multimedia information on the local airport. 
[0026] Another application of the system is as a local- 
ised information service, provided in a specified envi- 

10 ronment such as a train. From the train's own data net- 
work a user can request information on the journey time, 
buffet car prices and menu. If security controls are used, 
items could be ordered/purchased. 



Claims 

1 . A method of providing access to a server of a dis- 
tributed computer system from a terminal, compris- 

20 ing the steps of identifying one or more character- 
istics of the terminal, selecting a distributed compu- 
ter system suitable for operation with a terminal 
having the characteristics so identified, and provid- 
ing access to the distributed computer system so 

25 identified. 

2. A method according to claim 1, wherein the terminal 
co-operates with an access control server, the ac- 
cess control server being part of the distributed sys- 

30 tern and therefore capable of connection to the se- 
lected apparatus. 



3. A method according to claim 1 or claim 2, in which 
the characteristic identified is the location of the ter- 
minal. 



35 



40 



45 



4. A method according to claim 3, in which the location 
is identified by an automatic position-finding proc- 
ess. 

5. A method according to any preceding claim, in 
which access is provided by retrieval from a store 
of an address for a distributed computer system, or 
a selected element thereof, having the required 
characteristic. 



6. An access control server for enabling access by an 
associated terminal apparatus to a distributed com- 
puter system, the access control server having 

so means for communication with at least one or more 
terminals, means for receiving data from the termi- 
nal Identifying one or more characteristics of the ter- 
minal, means for selecting a distributed computer 
system suitabel for co-operation with a terminal 

55 having the characteristics so identified, and means 
for providing access to the distributed computer 
system so identified. 
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7. Apparatus according to claim 6, wherein the access 
control server has means for identifying the location 
of the terminal. 

8. Apparatus according to claim 6 or 7, wherein the 
access control server has a storage means for stor- 
ing addresses for distributed computer systems, or 
a selected elements thereof, having given charac- 
teristics, for retreiva! . 
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